MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion

Description

The plugins do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing unauthenticated attackers to destroy arbitrary posts, pages and media attachments, bypassing the trash.